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10 TECHNICAL FIELD 

The present invention relates to the digital signing of 
documents, and more particular, to the digital signing of 
documents using a personal terminal device. 
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BACKGROUND OF THE INVENTION 

The WAP/WIN protocols enable personal trusted devices, 
such as mobile telephones, laptop computers, and personal data 
5 assistants, to become powerful signature generation devices 
that can be used to sign data from any PC, website, etc. 
Currently, there is only one way of performing digital 
signatures using a PTD such as a mobile terminal. This method 
involves the use of the WML-Script function signTEXT. The 

10 signTEXT function takes text as input and displays it to the 
user so that the user may generate a signature . The trust 
model is very simple and puts the responsibility on the user 
to confirm that what you see is what you sign. This is also 
referred to as the WYSIWYS principle. 

15 The major • problem with current systems using PTDs for 

digitally signing documents is the WYSIWYS principle. The 
problem arises because of the limited display capabilities of 
a PTD. It is generally not possible to display large 
documents on a PTD device such as a mobile terminal. 

20 Additionally, the buffering and content parsing capabilities 
of a mobile terminal are very limited and may not contain the 
proper applications to display the document in its received 
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format. For example, if a Word document is received, the PTD 
must have the ability to display Word format. 

Thus, the user is not actually digitally signing the 
entire document but only a small representation of the entire 
5 document referred to as a hash. This violates the WYSIWYS 
trust model, and a user can no longer verify that what he 
signs is necessarily what he thinks he signs. Thus, an 
improved method for enabling the use of PTD devices such as 
mobile terminal for digitally signing documents while still 
10 enabling a user to view all of the necessary portions of a 
document being signed is needed. 

SUMMARY OF THE INVENTION 

The present invention overcomes the foregoing and other 
15 problems with a method for digitally signing a document using 
a PTD that also provides a user the opportunity to view the 
document substantially in its entirety. The document to be 
digitally signed is received at a first location where the 
document may also potentially be displayed. A representation 
20 of the document is generated at the first location and the 
representation of the document is forwarded to a personal 
trusted device (PTD) . At the personal trusted device the user 
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may digitally sign the representation of the document after 
viewing the complete document at the first location. 

BRIEF DESCRIPTION OF THE DRAWINGS 

5 A more complete understanding of the method and apparatus 

of the present invention may be obtained by reference to the 
following Detailed Description when taken in conjunction with 
the accompanying Drawings wherein: 

FIGURE 1 is a block diagram illustrating the relationship 
10 between a document and a hash of a document; 

FIGURE 2 illustrates the use of a mobile terminal for 
digitally signing a document in conjunction with a viewing 
location; 

FIGURE 3 illustrates a first embodiment wherein the 
15 digital signature is provided using the combination of a 
trusted PC and a mobile terminal; 

FIGURE 4 is a flow diagram illustrating the method of 
FIGURE 3; 

FIGURE 5 is an illustration of alternative embodiment 
2 0 wherein a digital signature is obtained using a crypto module 
and a mobile terminal; 
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FIGURE 6 illustrates the document and hash displays at a 
PC and a mobile terminal; 

FIGURE 7 is a flow diagram illustrating the method of 
FIGURE 5; 

5 FIGURE 8 illustrates a method for obtaining a digital 

signature between a PC, a trusted party and a mobile 
terminal ; 

FIGURE 9 is a flow diagram illustrating the method of 
FIGURE 8; 

10 FIGURE 10 illustrates the use of streaming data between 

a PC and a mobile terminal to obtain a digital signature; 

FIGURE 11 is a flow diagram illustrating a first method 
of utilizing streaming data as illustrated in FIGURE 10; 

FIGURE 12 illustrates a second method for utilizing 
15 streaming data as shown in FIGURE 10. 

FIGURE 13 is a block diagram of a further embodiment 
including a customer PC, merchant server and customer mobile 
terminal and the interactions therebetween; and 

FIGURE 14 is a flow diagram illustrating the method of 
20 the system illustrated in Figure 13. 
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DETAILED DESCRIPTION 

Referring now to the drawings, and more particularly to 
the FIGURE 1, there is illustrated a document 10 and a hash 15 
of the document 10. The document 10 would consist of a copy 
5 of text which may comprise a contract, letter, sales receipt, 
or any other item that may need to be signed by a user. The 
hash 15 contains a listing of information pertaining to the 
document. This information could include, for example, a 
document title, a document number/id, an author/name id," and 
10 a hash representation which may be numeric, alpha-numeric or 
symbolic . 

Referring now to FIGURE 2, there is illustrated a general 
representation of the manner for using a personal trusted 
device such as a mobile terminal 20 to digitally sign a 

15 document 10. Alternatively, the personal trusted device could 
be a laptop computer, personal data assistant, pager or 
another mobile electronic device. The document 10 is 
forwarded to some type of viewing location 25 such as a PC, 
trusted server or other area which will be discussed 

2 0 momentarily. The document 10 is provided to the viewing 
location 25, where it may be displayed in its entirety by a 
user wishing to digitally sign the document 10. The hash 15 
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is created at the viewing location 25 or at a location 
associated with the viewing location 25 such that the hash 15 
may be transmitted to the mobile terminal 20 over a wireless 
or wireline connection. The user may view the document 10 in 
5 its entirety at the viewing location 25 and digitally sign the 
hash 15 at the mobile terminal 20. 

A first embodiment is illustrated in FIGURE 3 where there 
is illustrated a method for obtaining a digital signature 
using a trusted PC 30. In this embodiment, the information 

10 contained on the trusted PC 30 is assumed to be accurate, 
including the document 10, and the only thing needed to be 
protected is the communications channel 32 between the trusted 
PC 30 and the mobile terminal 20. The communications channel 
32 may utilize a serial cable, infrared link or Bluetooth 

15 (Bluetooth is a trademark of Telef onaktiebolaget LM Ericsson) 
pairing for transmitting data. The only requirement for this 
embodiment is that the trusted PC 3 0 be authenticated and the 
integrity of the data be protected over the communications 
link 32. 

2 0 Referring now to FIGURE 4, the trusted PC 3 0 receives the 

document 10 to be digitally signed at step 35. The mobile 
terminal 20 must authenticate the trusted PC 30 at step 40 to 
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confirm that the mobile terminal 20 is linking with the proper 
trusted PC 30. After authentication, the communications 
channel 32 is established at step 45, and the hash 15 of 
document 10 is transmitted at step 50 to the mobile terminal 
5 20. The user views the entire document 10 at the trusted PC 
3 0 and provides the digital signature at step 55 using the 
mobile terminal 20. The digital signature may be 

automatically provided by entering a PIN number at the mobile 
terminal 20. 

10 A further embodiment, shown in FIGURE 5, uses a crypto 

module 70 which may be implemented in a browser 65 contained 
within a PC 60. The crypto module 70 is integrated within the 
browser 65 and implements cryptography such as PKCS#11 and MS 
CAPI. In order to integrate the crypto module 70 within the 

15 browser 65, authenticity and integrity of the crypto module 70 
must be verified by the PC operating system or the browser 65 
before the module 70 is used. The crypto module 70 displays 
the document 10 to be signed along with the hash 15 to be 
transmitted to the mobile terminal 20 as is illustrated in 

20 FIGURE 6. The mobile terminal 20 may also authenticate and 
integrity protect the communications channel 75 between the PC 
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60 and mobile terminal 20 as discussed previously with respect 
to FIGURES 3 and 4 . 

Referring now to FIGURE 7, there is illustrated a flow 
diagram of the method for obtaining a digital ' signature 
5 utilizing a crypto module 70. The document 10 to be signed is 
received at step 80 and displayed by the crypto module 70 
using the browser 65 at step 85. The mobile terminal 20 
authenticates the PC 60 and crypto module 70 at step 90 and 
establishes a communications channel 75 at step 95. The hash 

10 15 of the document 10 is transmitted at step 100 to the mobile 
terminal 20 such that the hash 15 may be displayed at step 105 
on a display of the mobile terminal 20. The user views the 
displayed hash 15 at the mobile terminal and the document 10 
displayed at the crypto module 70 and provides at step 110 a 

15 digital signature of the document 10. 

Referring now to FIGURE 8, there is illustrated a further 
embodiment for obtaining a digital signature of a document 10 
wherein a trusted party 115 is used. In this embodiment, 
after receipt of a document 10, a PC 12 0 forwards the document 

20 through a web server 125 to the trusted party 115. Within the 
web server 125 a servlet 130 generates a hash 15 that is to be 
signed by the user at the mobile terminal 20. The hash 15 and 
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document 10 are forwarded from the web server 12 5 to the 
trusted party 115, and the hash is forwarded to the mobile 
terminal 20 via a communications channel 135. The data is 
transmitted from the PC 120 to the web server 125 and from the 
5 web server 125 to the trusted party 115 using SSL/TLS 
protocol . 

Referring now to FIGURE 9, there is provided a flow 
diagram more fully illustrating a method for obtaining a 
digital signature using a personal trusted device such as a 

10 mobile terminal 20 through a trusted party 115. The document 
10 to be signed is received at the PC 120 at step 140, and a 
user requests a digital signature at the PC 120 at step 145. 
The trusted party 115 authenticates the PC 120 at step 150 
before the connection established from the PC 12 0 to the web 

15 server 125 to the trusted party 115. Alternatively, the PC 
120 may have been previously securely identified at the 
trusted party 115 and already have a registered mobile 
terminal 20 on file with the trusted party 115 for the 
transaction. 

20 After the PC 120 has been authenticated, the request for 

a digital signature is transmitted to the web server 125 at 
step 155 along with the document 10. The servlet 130 
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generates a hash 15 from the provided document 10. The hash 
15 along with the document 10 and the request for the digital 
signature are forwarded at step 165 to the trusted party 115 
from the web server 125. The trusted party 115 sends at step 
5 170 the hash 15 to the mobile terminal 20 over a 
communications channel 135. After viewing the document at the 
trusted third party, the mobile terminal provides the digital 
signature at step 180, and the mobile terminal 20 notifies the 
trusted party 115 of the signature at step 185. The trusted 

10 party validates the provided digital signature and updates and 
notifies the transaction as being signed at both the PC 120 
and mobile terminal 20 at step 190. 

Referring now to FIGURE 10, there is illustrated yet 
another embodiment wherein a PC 200 transmits a document 10 to 

15 the mobile terminal 20 as streaming data. The general concept 
behind the use of streaming data is that all or a large 
portion of the data, not only the hash, shall be transmitted 
to the mobile terminal 20 for signature generation. The data 
to be signed is displayed at the PC 200 and is streamed to the 

20 mobile terminal 20. The problem still exists that the entire 
document cannot be displayed to a user on a small screen of 
the mobile terminal 20, and the internal buffers of the mobile 
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terminal 2 0 are not normally large enough to store a large 
document. This requires the use of one of two solutions 
described in more detail in FIGURES 11 and 12. 

Referring now to FIGURE 11, there is illustrated a method 
5 wherein a user utilizes a mouse at the PC 200 to select 
relevant text at step 205 that the user considers to be 
essential. The selected text and the hash 15 are transmitted 
to the mobile terminal at step 210. The user digitally signs 
the received information at step 215 after viewing the 

10 provided text and the hash 15. 

Referring now to FIGURE 12, there is illustrated an 
alternative embodiment wherein a user may trigger a button or 
activation point at step 220 of the mobile terminal 20. 
Responsive to the trigger, the mobile terminal 20 displays the 

15 present content of its buffers at step 225. The user may then 
digitally sign a document at step 230 based upon what is 
viewed. 

Despite being unable to display or even store a large 
document 10, the mobile terminal 2 0 may be able to receive the 
20 text of the document 10 from the PC and compute the hash 15 
from the received text. The hash 15 computed in the mobile 
terminal 20 can then be compared in the mobile terminal 20 
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with the hash 15 transmitted by the PC which the user is being 
invited to sign. Other checks such as byte count can also be 
computed in the mobile terminal 2 0 to verify that the document 
10 to which the hash code 15 applies is the claimed document 
5 10. It would be preferable to include the document byte count 
as part of the bytestring over which the hash code 15 is 
computed. The above steps provide additional security 
safeguards to the user that he is signing what he thinks he is 
signing. 

10 Referring now to FIGURE 13, there is illustrated an 

alternative embodiment for providing a digital signature 
including a customer PC 250, a merchant server 255 and a 
customer mobile electronic transaction (MeT) device 260. The 
customer PC 250 includes a web browser 265 enabling the user 

15 to access the merchant server 255 via a network such as the 
Internet. The customer PC 250 further includes a mobile 
electronic terminal personal proxy (MPP) 270 for controlling 
electronic commerce transactions between the customer PC 250, 
the merchant server 255 and the customer Mobile electronic 

20 transaction device 260. The MPP 270 is accessed via the web 
browser 265. The MPP 270 comprises a software module that is 
executable by the customer PC 250. Communications between the 
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browser 265 and MPP 270 and between the MPP 270 and the 
merchant server 255 use HTTP protocol (extended to handle the 
Mobile electronic transaction specific header information) 
over TCP/IP. The MPP 270 enables the customer PC 250 to act 
5 as a server for a Mobile electronic transaction device 260. 
Access to the Mobile electronic transaction device 260 will 

pas. 

*JJ only require user provided authentication (password, PIN) when 

Q payment is requested. 

fU An application 275 within the customer PC provides any of 

p 10 a number of functionalities with respect to an electronic 
n commerce transaction. With respect to the following 

pi description of the method of the present invention, the 

P application 275 will provide a digital signature functionality 

r ~" wherein a data string provided from the merchant server 255 

15 may have a digital signal appended thereto by the application 
275 . 

The web server 280 provides the ability for the mobile 
terminal to connect to services in the PC 250. The WAP 
gateway 285 provides for the ability of a wireless device such 
20 as the Mobile electronic transaction device 260 to access the 
Internet using the WAP protocol through the customer PC 250. 
The WAP gateway 285 acts as an interface between a WAP network 
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and a TCP/IP network such as the Internet. The WAP gateway 
285 converts between the WAP and TCP/IP protocols. 

The Bluetooth stack 290 enables the customer PC 250 to 
generate a short range wireless link with the Mobile 
5 electronic transaction device 260 within a limited, defined 
area using the Bluetooth protocol. While the present 
invention is described with the use of a short range wireless 
link using the Bluetooth protocol, it should be realized that 
any other short range wireless protocol enabling the customer 

10 PC 250 to access a closely located Mobile electronic 
transaction device 260 or other information devices would be 
useful within the context of the present invention. 

The mobile electronic transaction device 260 may consist 
of a mobile telephone, laptop computer, personal data 

15 assistant, or any other similarly configured mobile electronic 
device which contains information necessary to complete an 
electronic commerce transaction. The merchant server 255 
includes applications 295 for performing necessary 
functionalities for completing an electronic commerce 

20 transaction with the customer PC 250 and a web server 300 
enabling the merchant server to obtain access to a network 
such as the Internet. 
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Referring now also to FIGURE 14, there is illustrated a 
flow diagram illustrating the manner in which the MPP 2 70 
controls a request for performance of a digital signature 
between a customer PC 250, merchant server 255 and Mobile 
5 electronic transaction device 260. At step 305, a request is 
transmitted from the web browser 265 to the MPP 270. The MPP 
270 forwards the request to the web server 3 00 of the merchant 
server 255 at step 310. The request may comprise a request to 
purchase a particular item or to download already purchased 
10 products. 

In order to process the request, the merchant server 255 
requires a digital signature from the customer. The merchant 
server 255 responds to the request by transmitting at step 315 
a response that includes a specific data string and a request 
15 for digital signature to be attached to the data string. The 
merchant response to the request from the MPP 270 comprises a 
URI containing a specific HTTP 1.1 header: for example: 

[Mobile electronic transaction-sign: 

"http://merchantsite.com/responsesite/", "String to sign"] . This 

20 comprises an instruction for the Mobile electronic transaction 
device 260 to sign the attached data string and transmit the 
digitally signed data string back to the indicated HTTP site. 
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The MPP 270 will pass most requests or responses through 
without taking action. However, once a Mobile electronic 
transaction command is detected within a request or response 
the MPP 270 is actuated. The MPP 270 recognizes the Mobile 
5 electronic transaction command included in the HTTP header and 
transmits at step 320 a notification to the browser 265 
indicating a digital signature has been requested. It should 
be realized that Mobile electronic transaction commands other 
than a request for a digital signal may also be utilized. The 

10 web browser 2 65 will display a page having a PRAGMA REFRESH 
(fetch from server when reloaded, i.e., do not cache) header 
command while the digital signature is obtained. 

The data string within the response from the merchant 
server 255 is forwarded at step 325 to the application 275 

15 within the customer's PC 250. Responsive to the received data 
string, the application 275 transmits at step 330 a command to 
the Bluetooth stack 290. The command instructs the Bluetooth 
stack 290 to awaken the Mobile electronic transaction device 
260, if possible. The awakening is accomplished by 

2 0 transmitting an AT command to the Mobile electronic 
transaction device 260 using Bluetooth at step 335. 
Responsive to this awakening, the Mobile electronic 
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transaction device 260 will request at step 336 the same 
application of the Mobile electronic transaction device 260. 
The application within the Mobile electronic transaction 
device 260 executes at step 340 a WML script code that will 
5 provide a request containing the digital signature (response) . 
At step 345 the response including the digital signature is 
transmitted to the web server 280 via the Bluetooth stack 290 
and WAP Gateway 285. The response is then passed to the 
application 275. The application 275 appends the digital 
10 signature to the provided data string at step 350 and notifies 
the Bluetooth stack 290 of the completed signature at step 
355 . 

The application 275 forwards at step 360 the digitally 
signed data string back to the MPP 270. The MPP 270 notifies 

15 the browser at step 365 of the completed signing of the data 
string which then begins reloading a URI displaying an 
indication that the data string has been signed. The MPP 
transmits at step 370 an HTTP request to the URL contained in 
the original HTTP header 

20 (http://merchantsite.com/responsesite/) containing the signed 
data string. Upon receipt of the signed data string the web 
server 300 within the merchant server 255 transmits a response 
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back to the MPP at 375 notifying the web browser 265 of the 
customer PC that the transaction is completed. 

The previous description is of a preferred embodiment for 
implementing the invention, and the scope of the invention 
should not necessarily be limited by this description. The 
scope of the present invention is instead defined by the 
following claims. 
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